Lucene search
+L

425 matches found

Prion
Prion
•added 2022/09/06 5:15 p.m.•23 views

Buffer overflow

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa...

5CVSS7.6AI score0.00829EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/06 12:00 a.m.•17 views

PT-2022-25215 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 Description: The issue is related to a Buffer Overflow that can be triggered via the hostname parameter in the binary /bin/boa. This can potentially allow for unauthorized acces...

7.5CVSS7.6AI score0.00829EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/06 12:00 a.m.•4 views

CVE-2022-40112: Buffer Copy without Checking Size of Input

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa...

7.5CVSS7.2AI score0.00829EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/08/28 5:15 p.m.•15 views

CVE-2022-38568

Tenda M3 V1.0.0.124856 was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service DoS via the hostname parameter...

7.5CVSS6AI score0.0097EPSS
SaveExploits1References2
OSV
OSV
•added 2022/08/28 5:15 p.m.•15 views

CVE-2022-38568

Tenda M3 V1.0.0.124856 was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service DoS via the hostname parameter...

7.5CVSS6.1AI score0.0097EPSS
SaveExploits1References1
Prion
Prion
•added 2022/08/28 5:15 p.m.•38 views

Heap overflow

Tenda M3 V1.0.0.124856 was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service DoS via the hostname parameter...

5CVSS7.6AI score0.0097EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/28 12:00 a.m.•11 views

CVE-2022-38568: Out-of-bounds Write

Tenda M3 V1.0.0.124856 was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service DoS via the hostname parameter...

7.5CVSS7.6AI score0.0097EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/28 12:00 a.m.•19 views

PT-2022-4463 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A heap buffer overflow issue in the formSetFixTools function allows attackers to cause a Denial of Service DoS via the hostname parameter. This can be exploited by a remote attacker to disrupt servic...

7.8CVSS7.7AI score0.0097EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/08/28 12:00 a.m.•14 views

Tenda M3 缓冲区错误漏洞

Tenda M3 is an access controller from Tenda, China. A security vulnerability exists in Tenda M3 version V1.0.0.124856, which is caused by a heap buffer overflow vulnerability in the formSetFixTools function. The vulnerability allows an attacker to cause a denial of service DoS via the hostname...

7.5CVSS7.3AI score0.0097EPSS
SaveExploits1References2
OSV
OSV
•added 2022/08/25 3:15 p.m.•16 views

CVE-2022-37079

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

7.8CVSS5.8AI score0.01245EPSS
SaveExploits1References1
NVD
NVD
•added 2022/08/25 3:15 p.m.•33 views

CVE-2022-37079

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

7.8CVSS0.01245EPSS
SaveExploits1References1
Prion
Prion
•added 2022/08/25 3:15 p.m.•29 views

Command injection

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

4.3CVSS7.9AI score0.01245EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2022/08/25 2:15 p.m.•7 views

CVE-2022-36485

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

7.8CVSS7.6AI score0.01059EPSS
SaveExploits1References2
OSV
OSV
•added 2022/08/25 2:15 p.m.•13 views

CVE-2022-36485

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

7.8CVSS5.8AI score0.01059EPSS
SaveExploits1References1
NVD
NVD
•added 2022/08/25 2:15 p.m.•30 views

CVE-2022-36485

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

7.8CVSS0.01059EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/08/25 2:15 p.m.•7 views

CVE-2022-36461

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

7.8CVSS7.6AI score0.01245EPSS
SaveExploits1References2
NVD
NVD
•added 2022/08/25 2:15 p.m.•32 views

CVE-2022-36461

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

7.8CVSS0.01245EPSS
SaveExploits1References1
Prion
Prion
•added 2022/08/25 2:15 p.m.•33 views

Command injection

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

4.3CVSS7.9AI score0.01245EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/08/25 1:55 p.m.•42 views

CVE-2022-36485

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

8.1AI score0.01059EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/08/25 1:53 p.m.•41 views

CVE-2022-36461

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

8.1AI score0.01245EPSS
SaveExploits1References1
Rows per page
Query Builder